Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (EAD) 5.0 before SP1 E0101P03 components in HP Intelligent Management Center (aka iNode Management Center) allows remote attackers to execute arbitrary code via a 0x0A0BF007 packet.

The remote host is running an instance of HP iNode Management Center that is affected by a remote buffer overflow vulnerability. An unauthenticated, remote attacker can send a specially crafted packet that could result in a stack-based buffer overflow. A successful attack will allow the attacker to run arbitrary code with SYSTEM privileges.

The remote Windows host has an installation of HP iNode Management Center that is affected by a remote code execution vulnerability. An unauthenticated remote attacker can send a specially crafted packet that could result in a stack-based buffer overflow. A successful attack will allow running arbitrary code with SYSTEM privileges.

Versions of HP Intelligent Management Center Endpoint Admission Defense earlier than 5.0 E0101P03 are potentially affected by a code execution vulnerability in the 'iNOdeMngChecker.exe' component which listens by default on TCP port 9090 because the application fails to validate user supplied data when handling a '0x0A0BF007' packet type.  A remote unauthenticated attacker, exploiting this flaw, could potentially execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

Versions of HP Intelligent Management Center User Access Manager earlier than 5.0 E0101P03 are potentially affected by a code execution vulnerability in the 'iNOdeMngChecker.exe' component which listens by default on TCP port 9090 because the application fails to validate user supplied data when handling a '0x0A0BF007' packet type.  A remote unauthenticated attacker, exploiting this flaw, could potentially execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

ID	Name	Product	Family	Severity
55907	HP iNode Management Center Buffer Overflow (HPSB3C02687) (remote check)	Nessus	Gain a shell remotely	critical
55577	HP iNode Management Center Remote Code Execution (HPSB3C02687)	Nessus	Windows	critical
5984	HP Intelligent Management Center Endpoint Admission Defense < 5.0 E0101P03 Code Execution Vulnerability	Nessus Network Monitor	Generic	critical
5983	HP Intelligent Management Center User Access Manager < 5.0 E0101P03 Code Execution Vulnerability	Nessus Network Monitor	Generic	critical

Detections

Analytics

CVE-2011-1867

critical

Tenable Plugins

critical

critical

critical

critical